Back to skill
Skillv1.0.0
VirusTotal security
Agent Treasury · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:50 AM
- Hash
- 36957c09d0103bbddaab3215b4e7382b055cfdbcb895c005644aed5c85a6ff26
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: agent-treasury Version: 1.0.0 The skill 'agent-treasury' is designed to manage an agent's crypto wallet, including checking balances, tracking earnings, and sending tokens. All code examples (bash and JavaScript) align with this stated purpose, interacting with public blockchain APIs (Hedera, Base/EVM) and managing a local ledger file (`~/.config/agent-treasury/ledger.txt`). While sending tokens is a high-risk operation, it is the core functionality of a wallet management skill, and the code uses placeholders like 'YOUR_KEY' and 'YOUR_ACCOUNT', implying the agent is configured with its own credentials rather than the skill attempting to steal them. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts in SKILL.md designed to subvert the agent's behavior for harmful purposes.
- External report
- View on VirusTotal